Merge pull request cli#9243 from cli/remove-attestation-public-beta

Remove `gh at verify` public beta note

Gracefully degrade when fetching annotations fails due to 403 (cli#9113)


Co-authored-by: William Martin <[email protected]>

Merge pull request cli#9140 from cli/andyfeller/cli-9139-sign-pkg-pre…

…docs

Clarify Mac OS Installer packages are unsigned

Merge pull request cli#9075 from cli/dependabot/go_modules/github.com…

…/sigstore/protobuf-specs-0.3.2

build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2

Fix `attestation verify` source repository check bug (cli#9053)

* add build source repo URI extension when repo is provided, add integration tests for this change

Signed-off-by: Meredith Lancaster <[email protected]>

* add initial docs on specifying cert identity

Signed-off-by: Meredith Lancaster <[email protected]>

* wording

Signed-off-by: Meredith Lancaster <[email protected]>

* add reusable workflow example

Signed-off-by: Meredith Lancaster <[email protected]>

* add more test cases

Signed-off-by: Meredith Lancaster <[email protected]>

* tweak to verify docs

---------

Signed-off-by: Meredith Lancaster <[email protected]>
Co-authored-by: Phill MV <[email protected]>

Merge pull request cli#9030 from cli/wm/doc-clone

Document repo clone protocol behaviour

Merge pull request cli#8620 from heaths/merge-json

Merge JSON responses from `gh api`

Merge pull request cli#8920 from cli/wm/bump-glam-glam

Include draft ID in project item list JSON (cli#8754)

Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (cli#8787)